npm · Malicious package advisory
Malwareethers-6
MAL-2024-9421
Malicious code in ethers-6 (npm)
Details
The package contains additional code to exfiltrate user private keys to an attack-controlled server.
Compromised versions (1)
- 6.13.4
Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.